New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve CreateFakeJwks #47621
Improve CreateFakeJwks #47621
Conversation
9103721
to
8c0e089
Compare
// Encode jwksURI with base64 to make dynamic n in jwks | ||
encodedString := base64.RawURLEncoding.EncodeToString([]byte(fakeJwksURI)) | ||
return fmt.Sprintf(`{"keys":[ {"e":"AQAB","kid":"abc","kty":"RSA","n":"%s"}]}`, encodedString) | ||
func CreateFakeJwks() string { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this a const, can we cache it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
updated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is still not stable and will result in XDS draining as we hop between instances every 30min. This is really bad and this exact issue has caused massive production issues for our customers in the past./
This must be static and deterministic.
This reverts commit 968a6f9.
fixes: #47532
see details:
#47532 (comment)
#47532 (comment)